Loaded from cache (as of 2026-09-20 04:55:38 IST). Refresh
Intelligence Report for securityheaders.com
| Domain | securityheaders.com |
|---|---|
| Website Title | |
| Registered | 2013-03-10 |
| Expires | 2027-03-10 |
| Remaining Validity | 5 months, 17 days |
| Domain Age | 13 years, 6 months |
| Registrar | Cloudflare, Inc. |
| Domain Status | client transfer prohibited |
| IP Address | 104.18.25.239 |
| Hosting Provider | Cloudflare, Inc. |
| Control Panel | Not Detected |
| Email Provider | Google Workspace |
| SSL Issuer | WE1 |
| SSL Issued Date | 2026-08-14 |
| SSL Expires | 2026-11-12 |
Domain Information
| Domain Name | SECURITYHEADERS.COM |
| Registration Date | 2013-03-10 22:03:49 Z |
| Expiration Date | 2027-03-10 22:03:49 Z |
| Last Changed Date | 2024-09-04 07:41:02 Z |
Domain Status
- client transfer prohibited
Registrar Information
| Name | Cloudflare, Inc. |
| Abuse Email | registrar-abuse@cloudflare.com |
Registrant Contact
Contact information for this role is not provided or redacted.
Administrative Contact
Contact information for this role is not provided or redacted.
Technical Contact
Contact information for this role is not provided or redacted.
Nameservers
- ADRIAN.NS.CLOUDFLARE.COM
- KARL.NS.CLOUDFLARE.COM
NS Records
| Name | Data |
|---|---|
| securityheaders.com. | adrian.ns.cloudflare.com. |
| securityheaders.com. | karl.ns.cloudflare.com. |
A Records
| Name | Data |
|---|---|
| securityheaders.com. | 104.18.25.239 |
| securityheaders.com. | 104.18.24.239 |
AAAA Records
| Name | Data |
|---|---|
| securityheaders.com. | 2606:4700::6812:19ef |
| securityheaders.com. | 2606:4700::6812:18ef |
WWW Records (www.securityheaders.com)
| Type | Host | Value |
|---|---|---|
| A | www.securityheaders.com. | 104.18.25.239 |
| A | www.securityheaders.com. | 104.18.24.239 |
MX Records
| Priority | Target |
|---|---|
| 10 | alt3.aspmx.l.google.com. |
| 1 | aspmx.l.google.com. |
| 5 | alt1.aspmx.l.google.com. |
| 5 | alt2.aspmx.l.google.com. |
| 10 | alt4.aspmx.l.google.com. |
TXT Records
| Name | Data |
|---|---|
| securityheaders.com. | v=spf1 include:spf.messagingengine.com include:_spf.google.com ~all |
| securityheaders.com. | keybase-site-verification=A02HdX9eUIIgkej7_ytW-tyWDQSKJil2mlg2OlawkEA |
| securityheaders.com. | google-site-verification=UCEy6mriyH9IDqq7R172wW0GafxRDrYE9hgd18OFIHw |
| securityheaders.com. | google-site-verification=w251X-tI6DaKlmxSXZWRCAAlWl1czVeRt1mHvZ24HZw |
| securityheaders.com. | brave-ledger-verification=5b485ba5c292f45f7f9eed9ff6e8d4a57970c4ae4744472900f4f1f4832637a6 |
| securityheaders.com. | h1-domain-verification=kdXQcEm5T5gzmr38FxWHjNAWnHaDsvLUmoKEfegAJoRGLTXM |
| securityheaders.com. | stripe-verification=6b65f329c2a4ed126677d883d21b637b2c8a52c3e6a64ac48d1b76d943099abc |
IP Address Details
| IP Address | 104.18.25.239 |
|---|---|
| Country | Canada (CA) |
| Region | Ontario |
| City | Toronto |
| ZIP Code | N/A |
| ASN | 13335 |
| Organization | Cloudflare, Inc. |
SPF Record Validation
v=spf1 include:spf.messagingengine.com include:_spf.google.com ~all
Record Breakdown
| Prefix | Type | Value | Description |
|---|---|---|---|
| + | v | spf1 | The SPF record version. |
| + | include | spf.messagingengine.com | The specified domain is searched for a match. |
| + | include | _spf.google.com | The specified domain is searched for a match. |
| ~ | all | Always matches. This should be the last mechanism. |
Validation Summary
| SPF Record Published | Pass An SPF record was found. |
| Multiple SPF Records | Pass Only one SPF record was found. |
| Included Lookups | Pass The number of DNS lookups (2) is within the limit of 10. |
| Type PTR Check | Pass The deprecated PTR mechanism was not found. |
| Characters After ALL | Pass No mechanisms were found after the "all" mechanism. |
Common DKIM Records
Google Workspace (google)
| Name | Data |
|---|---|
| google._domainkey.securityheaders.com. | v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg2Wucr8bM9HtkpXAaNGXtErYTc2qy6hOspAQjL68F4MOLYbcmoXeKQpL17tc/OXw/LApmSOsxXEB78wPSx3pcTPzIqm3EPl2DyxlFZuIn83yfuOmQMP3g7TA7vxMK4jn4YbyyOO1SLKxqIJ9YyUM5Vm8khPWtRavH8hMEnn8riLh/RKcQLOudmH9lsWRFFDA+IAKypk5Y86K8L7F0H8w0CZuC6IuRU5rMaq/4COGSNeQJDbRqEbGORQFkIe6olW019j4tKzlxFEFjKgh+0/lZSfaGgZ+mTOroNefWzOMZ8biaUM2YVHbz0EnsMnX81ElCMu8vueLdsBp2lDaj1VlQIDAQAB |
SendGrid (s1)
| Name | Data |
|---|---|
| s1._domainkey.securityheaders.com. | s1.domainkey.u6215048.wl049.sendgrid.net. |
| s1.domainkey.u6215048.wl049.sendgrid.net. | k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu6P7sFPUk55hzTYlt2YeBfimkU2miYT/6ra9mJJt2kmP2JlM9NoHTg9Ftrw4obyL9s4mzfL94udF9B8cgVfDz4obIQYnTsidCZJGRFbO4KWIASut37GZYKSngD+EvG0/3p2h+9wlbneOEMQhcsl3/KosdyQmUlX9Q3I7ugCZc5K0qmd/4/DEG85HR6ZRYcS3nopu8djlTYVzjnlTbTJfHpJ9CDpTICuDXseA7qlBC4R1rmwYD9lX/XM/ZpODrlWxhWXc6UgcGIlcMkyUUDejgsWrP1UmXG7eaNJ49C/VmRjQMfkzENut6+vXSBXHKL3u6mcoUDLezC8/CF/ed6wBwIDAQAB |
DMARC Record Validation
v=DMARC1; p=quarantine; rua=mailto:scotthelme-d@dmarc.report-uri.com; ruf=mailto:scotthelme-d@dmarc.report-uri.com; aspf=r; adkim=r
Record Breakdown
| Tag | Value | Description |
|---|---|---|
| v | DMARC1 | Version: Must be "DMARC1". |
| p | quarantine | Policy: The action to take for failed emails (none, quarantine, reject). |
| rua | mailto:scotthelme-d@dmarc.report-uri.com | Aggregate Reports: Email address(es) to send summary reports. |
| ruf | mailto:scotthelme-d@dmarc.report-uri.com | Forensic Reports: Email address(es) to send detailed failure reports. |
| aspf | r | SPF Alignment: Specifies strict (s) or relaxed (r) alignment for SPF. |
| adkim | r | DKIM Alignment: Specifies strict (s) or relaxed (r) alignment for DKIM. |
Validation Summary
| DMARC Record Published | Pass A DMARC record was found. |
| Syntax Check | Pass The record has a valid version tag. |
| Policy Enforcement | Pass The policy is "p=quarantine", which sends failing emails to spam. |
| Aggregate Reporting | Pass An address for aggregate reports was found. |
Suggestions
This is a good step. Continue monitoring reports and consider moving to "p=reject" for the highest level of protection.
SMTP Connectivity Test (Port 25)
| Mail Server | Status | Latency | Banner / Error |
|---|---|---|---|
| aspmx.l.google.com | Success | 8ms | 220 mx.google.com ESMTP d2e1a72fcca58-877a9d07433si6124749b3a.121 - gsmtp |
IP Blacklist Check (104.18.25.239)
Website Identity
| Title | |
|---|---|
| Meta Description | Quickly and easily assess the security of your HTTP response headers |
Hosting & Network
| IP Address | 104.18.25.239 |
|---|---|
| HTTP Status | 200 |
| Hosting Provider | Cloudflare, Inc. |
| Web Server | cloudflare |
| Control Panel | Not Detected |
Technology Profile
- Cloudflare
- PHP
- jQuery
- Google Tag Manager
SSL Certificate Details
- Server IP address : 104.18.25.239
- Server Type : cloudflare
- Issuer : WE1
- Expiring In : 53 Days
- Chain Status: Valid
- Common name : securityheaders.com
- Alternative names (SANs) : DNS:securityheaders.com, DNS:*.securityheaders.com
- Organization: N/A
- Valid From Aug 14, 2026 to Nov 12, 2026
- Signature Algorithm : ecdsa-with-SHA256
- Issuer : WE1
- Common name : WE1
- Organization : Google Trust Services
- Location : US
- Valid From Dec 13, 2023 to Feb 20, 2029
- Signature Algorithm : ecdsa-with-SHA384
- Issuer : GTS Root R4
- Common name : GTS Root R4
- Organization : Google Trust Services LLC
- Location : BE
- Valid From Nov 15, 2023 to Jan 28, 2028
- Signature Algorithm : RSA-SHA256
- Issuer : GlobalSign Root CA
Security Headers
| Strict-Transport-Security | Present |
| Content-Security-Policy | Present |
| X-Frame-Options | Present |
| X-Content-Type-Options | Present |
| Referrer-Policy | Present |
| Permissions-Policy | Present |
Understanding Your Report for securityheaders.com
Domain Status
Also known as EPP status codes, these indicate the state of the domain. Common statuses include 'clientTransferProhibited' (locked) or 'active' (ready to use).
Registrar Information
The registrar is the accredited organization (like GoDaddy, Namecheap, or Google Domains) where the domain name was purchased and is managed.
Registrant Contact
The individual or organization that legally owns the domain. This information is often redacted for privacy compliance (GDPR).
Nameservers
Servers that act as a directory for your domain. They translate your domain name into IP addresses, telling the internet where to find your website and email services.
NS Records
Name Server records specify which nameservers are authoritative for your domain. Changing these allows you to move DNS management to a different provider.
A Records
Address Records map a domain name directly to an IPv4 address (e.g., 192.0.2.1). This is the primary record used to point a domain to a web server.
AAAA Records
IPv6 Address Records map a domain name to an IPv6 address (e.g., 2001:0db8...). They serve the same purpose as A records but for the newer internet protocol.
WWW Records
Usually a CNAME or A record that ensures 'www.yourdomain.com' loads the same content as the root domain 'yourdomain.com'.
MX Records
Mail Exchange records direct emails sent to your domain to the correct mail servers. Without valid MX records, you cannot receive email.
TXT Records
Text records allow admins to store text notes in the DNS. They are primarily used for domain verification and email security protocols like SPF and DKIM.
SPF Records
Sender Policy Framework is a security record listing the IP addresses and servers authorized to send email on behalf of your domain to prevent spoofing.
DMARC Records
Domain-based Message Authentication, Reporting, and Conformance uses SPF and DKIM to determine email authenticity and instructs receivers how to handle failed checks.
DKIM Records
DomainKeys Identified Mail stores a public key in the DNS. Receivers use this to verify the digital signature on your emails, ensuring they haven't been tampered with.
HTTP Status
A 3-digit code returned by the server indicating the result of a request (e.g., 200 OK, 301 Redirect, 404 Not Found, 500 Server Error).
Hosting Provider
The company providing the physical or virtual servers where your website's files, databases, and content are stored and served to the internet.
Web Server
The software (like Apache, Nginx, or LiteSpeed) running on the hosting server that handles incoming requests and delivers web pages to visitors.
Control Panel
The interface provided by your host (e.g., cPanel, Plesk, DirectAdmin) to manage your website files, databases, email accounts, and settings.
Technology Profile
Detects the underlying software stack used by the website, including Content Management Systems (CMS), JavaScript frameworks, programming languages, and analytics tools.
Report Limitations & Data Sources
- Data Currency: This report may use cached data (up to 4 hours) for speed. Use the "Refresh" button to force a live lookup.
- DNS Propagation: Records are queried via Google Public DNS. Recently changed records might not be visible immediately due to global propagation delays.
- Completeness: This tool checks for specific, common DNS records (A, MX, TXT, etc.). It does not perform a full zone transfer or exhaustive subdomain enumeration.
- Security Posture: The security analysis (SPF/DMARC) is based on public DNS availability. It cannot verify internal mail server configurations, firewalls, or email filtering rules.